Jeremy Reichman Jaharmi

Encrypted APFS Home Folder on Mac OSX

Note: This is an update of Will Haley's excellent post to use APFS instead of CoreStorage.

UPDATE: Doesn't work on Catalina

The script can't read the file containing the password on the USB thumb drive. When formatted as FAT32 as described below, the user/group of the file is unknown/unknown. But I also tried formatting the USB thumb drive in HFS+, unchecking "Ignore permissions on this volume" and changing the file owner to root:wheel. The file is still not readable to the boot process. Probably something to do with new security restrictions in Catalina. A script running as root reading data from a thumb drive? Makes sense.

Back to previous program

How to Install Telegraf logparser for pfBlockerNG

On pfSense

Step 1: Install pfBlockerNg-devel

System > Package Manager > Available Packages > pfBlockerNG-devel (As of this writing this was 2.2.5_19) (Optional, run the /usr/local/bin/geoipupdate.sh script)

[2.4.4-RELEASE][[email protected]]/root: /usr/local/bin/geoipupdate.sh
Fetching GeoIP.dat and GeoIPv6.dat...
/usr/local/share/GeoIP/GeoIPupdate.VOmIvG/GeoI100% of  694 kB 6683 kBps 00m00s
/usr/local/share/GeoIP/GeoIPupdate.TeBBKT/GeoI100% of 1171 kB 6629 kBps 00m00s

libdispatch efficiency tips

The libdispatch is one of the most misused API due to the way it was presented to us when it was introduced and for many years after that, and due to the confusing documentation and API. This page is a compilation of important things to know if you're going to use this library. Many references are available at the end of this document pointing to comments from Apple's very own libdispatch maintainer (Pierre Habouzit).

My take-aways are:

You should create very few, long-lived, well-defined queues. These queues should be seen as execution contexts in your program (gui, background work, ...) that benefit from executing in parallel. An important thing to note is that if these queues are all active at once, you will get as many threads running. In most apps, you probably do not need to create more than 3 or 4 queues.
Go serial first, and as you find performance bottle necks, measure why, and if concurrency helps, apply with care, always validating under system pressure. Reuse

Install Screen

$ sudo apt install screen

Enter a new Screen Session

$ screen

Detach from current screen session

	Archive of the code for images posted to https://twitter.com/tweegeemee

	Started January 26, 2019
	Used 6 creations from the last series to seed.

	:clisk-random-seed 190126

	Learn more at https://github.com/rogerallen/tweegeemee

	This will allow several functions including a persistent pop-up notification on your HA front end, a notification to whichever notify service you use (I’m using Pushbullet in this example), and, if you use another custom component (https://community.home-assistant.io/t/echo-devices-alexa-as-media-player-testers-needed/58639), it will also trigger an announcement to all of your Echo devices.

	You next need to find either your NWS Zone ID or County ID. It is better to use both ID's here.

	You can find your Zone or County ID by going to https://alerts.weather.gov/, scroll down to your state and click on the “zone list” and/or "county list" then look for the entry for your county.

	Once you have your desired ID you create a sensor, replacing my id (INZ009, INC033) with yours. The ID is case sensitive!

	Then when you have your ID's, enter them into the configuration below.

	@-moz-document url-prefix("https://mail.google.com/mail/") {

	/*
	*****
	This style is based off of Nicer New Gmail but it's really more of a slash and burn approach.
	NO COLORS except tiny bit of red and yellow and some blue I can't get rid of.
	I know just enough CSS to be dangerous and not enough to really make things work correctly. Some things it
	chokes on:
	- tabs! I don't use them so who cares what they look like
	- hangout/chat tab - I disabled this as soon as they added it, maybe it's blue, I don't know

	import objc
	from ctypes import create_string_buffer, c_void_p, cast
	from Foundation import NSBundle

	Security = NSBundle.bundleWithIdentifier_('com.apple.security')

	# CMSDecoder.h
	kCMSSignerUnsigned = 0
	kCMSSignerValid = 1
	kCMSSignerNeedsDetachedContent = 2

	To prevent unintended installations, profiles containing certain payloads (specifically com.apple.Safari) will require a manual verification even when running as root.

	Example:
	sudo profiles install -path ~/Desktop/safari.mobileconfig
	Enter the admin user name:

	sudo profiles -IvF ~/Desktop/safari.mobileconfig
	profiles: verbose mode ON
	profiles install profile ~/Desktop/safari.mobileconfig for user: (null)
	Enter the admin user name:

	#!/usr/bin/python

	from __future__ import print_function
	import os
	import sys
	import struct
	import macholib
	from macholib import MachO

	input_path = sys.argv[1]